cancan: initial integration

This also irons out the Devise integration:

* use the correct layout for the sign-in form
* implement the permissions check call to Kill Bill

Signed-off-by: Pierre-Alexandre Meyer <pierre@mouraf.org>